Connect with us

Coin Market

Hacker steals $8.4M from RWA restaking protocol Zoth

Published

on

Real-world asset (RWA) re-staking protocol Zoth suffered an exploit leading to over $8.4 million in losses, leading the platform to put its site on maintenance mode. 

On March 21, blockchain security firm Cyvers flagged a suspicious Zoth transaction. The security firm said that the protocol’s deployer wallet was compromised and that the attacker withdrew over $8.4 million in crypto assets. 

The blockchain security firm said that within minutes, the stolen assets were converted into the DAI stablecoin and were transferred to a different address. 

Cyvers added the protocol’s website had been maintained in response to the incident. In a security notice, the platform confirmed that it had a security breach. The protocol said it’s working to resolve the problem as soon as possible. 

The Zoth team said it worked with its partners to “mitigate the impact” and fully resolve the situation. The platform promised to publish a detailed report once its investigation is completed. 

Since the hack, the attackers have moved the funds and swapped the assets into Ether (ETH), according to PeckShield. 

Hacker moves stolen funds. Source: Peckshield

Related: SMS scammers posing as Binance have an even trickier way to fool victims

Hack likely caused by admin privilege leak

In a statement, the Cyvers team said the incident highlights vulnerabilities in smart contract protocols and the need for better security. 

Cyvers Alerts senior SOC lead Hakan Unal told Cointelegraph that a leak in admin privileges likely caused the hack. Unal said that about 30 minutes before the hack was detected, a Zoth contract was upgraded to a malicious version deployed by a suspicious address. 

“Unlike typical exploits, this method bypassed security mechanisms and gave full control over user funds instantly,” the security professional said. 

The security professional told Cointelegraph that this type of attack could be prevented by implementing multisig contract upgrades to prevent single-point failures, adding timelocks on upgrades to allow monitoring and placing real-time alerts for admin role changes. Unal added that better key management is also advised to prevent unauthorized access. 

While the attack could be prevented, Unal believes that this type of attack may continue to be a problem in decentralized finance (DeFi). The security professional told Cointelegraph that admin key compromises remain a “major risk” in the DeFi ecosystem. 

“Without decentralized upgrade mechanisms, attackers will continue targeting privileged roles to take over protocols,” Unal added. 

Magazine: Memecoins are ded — But Solana ‘100x better’ despite revenue plunge

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Coin Market

US Treasury argues no need for final court judgment in Tornado Cash case

Published

on

By

The US Treasury Department says there is no need for a final court judgment in a lawsuit over its sanctioning of Tornado Cash after dropping the crypto mixer from the sanctions list.

In August 2022, Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Tornado Cash after alleging the protocol helped launder crypto stolen by North Korean hacking crew the Lazarus Group, leading to a number of Tornado Cash users filing a lawsuit against the regulator. 

After a court ruling in favor of Tornado Cash, the US Treasury dropped the mixer from its sanctions list on March 21, along with several dozen Tornado-affiliated smart contract addresses from the Specially Designated Nationals (SDN) list, and has now argued “this matter is now moot.”

Because Tornado Cash has been dropped from the sanctions list, the US Treasury Department argues there is no need for a final court judgment in the lawsuit. Source: Paul Grewal

“Because this court, like all federal courts, has a continuing obligation to satisfy itself that it possesses Article III jurisdiction over the case, briefing on mootness is warranted,” the US Treasury said. 

However, Coinbase chief legal officer Paul Grewal said the Treasury’s hope to have the case declared moot before an official judgment can be made isn’t the correct legal process.

“After grudgingly delisting TC, they now claim they’ve mooted any need for a final court judgment. But that’s not the law, and they know it,” he said.

“Under the voluntary cessation exception, a defendant’s decision to end a challenged practice moots a case only if the defendant can show that the practice cannot ‘reasonably be expected to recur.’”

Grewal pointed to a 2024 Supreme Court ruling that found a legal complaint from Yonas Fikre, a US citizen who was put on the No Fly List, is not moot by taking him off the list because the ban could be reinstated again at a later date.

Source: Paul Grewal

“Here, Treasury has likewise removed the Tornado Cash entities from the SDN, but has provided no assurance that it will not re-list Tornado Cash again. That’s not good enough, and will make this clear to the district court,” Grewal said.

Six Tornado Cash users led by Ethereum core developer Preston Van Loon, with the support of Coinbase, sued the Treasury in September 2022 to reverse the sanctions under the argument that they were unlawful.

Crypto policy advocacy group Coin Center followed through with a similar suit in October 2022.

In August 2023, a Texas federal court judge sided with the US Treasury, ruling that Tornado Cash was an entity that may be designated per OFAC regulations. On appeal, a three-judge panel ruled in November that Treasury’s sanctions against the crypto mixer’s immutable smart contracts were unlawful.

US Treasury had a 60-day window to challenge the decision, which it did; however, the US court sided with Tornado Cash, overturning the sanctions on Jan. 21 and forcing the government agency to remove the sanctions by March.

Related: US Treasury under Trump could take a different approach to Tornado Cash

Its founders are still facing legal strife, however. The US charged Roman Storm and fellow co-founder Roman Semenov in August 2023, accusing them of helping launder over $1 billion in crypto through Tornado Cash. 

Semenov is still at large and on the FBI’s most wanted list. Storm is free on a $2 million bond and expected to face trial in April. 

Meanwhile, Tornado Cash developer Alexey Pertsev was released from prison after a Dutch court suspended his “pretrial detention” as he prepared to appeal his money laundering conviction.

Magazine: Ripple says SEC lawsuit ‘over,’ Trump at DAS, and more: Hodler’s Digest, March 16 – 22

Continue Reading

Coin Market

UK should tax crypto buyers to boost stock investing, economy, says banker

Published

on

By

The UK should begin taxing crypto purchases in a bid to sway Britons to invest in local stocks, which could boost the country’s economy, says the chair of investment bank Cavendish, Lisa Gordon.

“It should terrify all of us that over half of under-45s own crypto and no equities,” Gordon told The Times in a March 23 report. “I would love to see stamp duty cut on equities and applied to crypto.”

Currently, the UK lumps a 0.5% tax on shares listed on the London Stock Exchange, the country’s largest securities market, which brings in around 3 billion British pounds ($3.9 billion) a year in tax revenue.

Gordon added that a cut could sway people to put their savings into shares of local companies, which could then spark other firms to go public in the UK and help the economy.

In comparison, she called crypto “a non-productive asset” that “doesn’t feed back into the economy.”

“Equities provide growth capital to companies that employ people, innovate and pay corporation tax. That is a social contract. We shouldn’t be afraid of advocating for that.”

The country’s Financial Conduct Authority said in November that crypto ownership rose to 12% of adults, equivalent to around 7 million people. A majority of crypto owners, 36%, were under the age of 55 years old.

Gordon said that many had “shifted to saving rather than investing,” which she claimed “is not going to fund a viable retirement.”

A 2022 FCA survey found that 70% of adults had a savings account, while 38% either directly held shares or held them through an account allowing nearly 20,000 British pounds ($26,000) of tax-free savings a year — around three in four 18-24 years olds held no investments.

A quarter of 18-25 year olds and a third of 25-44 year olds held any investment in 2022. Source: FCA

But in a follow-up survey, the regulator reported that in the 12 months to January 2024, the cost of living crisis had seen 44% of all adults either stop or reduce saving or investing, while nearly a quarter used savings or sold their investments to cover day-to-day costs.

Gordon is a member of the Capital Markets Industry Taskforce, a group of industry executives aiming to revive the local market, which Cavendish would benefit from as it advises companies on how to navigate possible public offerings.

Related: Will new US SEC rules bring crypto companies onshore?

Consulting giant EY reported in January that the London stock market had one of its “quietest years on record,” with just 18 companies listing last year, down from 23 in 2023.

At the same time, EY said 88 companies delisted or transferred from the exchange, with many saying they moved due to “declining liquidity and lower valuations compared to other markets” such as the US.

However, Gordon claimed the UK is a “safe haven” compared to markets such as the US, which has lost trillions of dollars in its stock markets due to President Donald Trump’s tariff threats and fears of a recession.

Crypto markets have also slumped alongside US equities, with Bitcoin (BTC) trading down 11% over the past 30 days and struggling to maintain support above $85,000 since early March.

In the past 24 hours, at least, Bitcoin is up 2%, trading around $85,640.

Magazine: Memecoins are ded — But Solana ‘100x better’ despite revenue plunge 

Continue Reading

Coin Market

Bitcoin bottom forming as Fed eases, Trump softens on tariffs: Analyst

Published

on

By

Bitcoin may have bottomed and could rebound toward $90,000 after US President Donald Trump signaled a willingness to ease tariffs and the Federal Reserve resisted short-term pressure last week, according to a crypto analyst.

“Bitcoin is attempting to form a bottom, supported by Trump’s recent shift toward ‘flexibility’ on the upcoming April 2 reciprocal tariffs, softening his earlier rhetoric,” 10x Research’s founder Markus Thielen said in a March 23 report.

The Federal Reserve signaled in its March 18-19 meeting that it would also “look past short-term inflationary pressures, laying the groundwork for potential future easing,” Thielen added.

“Powell’s mildly dovish tone suggests that the Fed’s put remains intact, providing further support for a recovery in stock prices.”

10x Research’s Bitcoin reversal indicators have turned bullish as a result, with Bitcoin’s (BTC) 21-day moving average now at $85,200, Thielen noted.

Bitcoin’s bottoming formations over the last two years. Source: 10x Research

He said these weekly reversal indicators have pulled back to levels where past bull markets have resumed, such as in September 2023 — spurred on by the Bitcoin exchange-traded fund narrative — and August 2024 as the US election neared.

“In short, the technical backdrop has now reset to a point where a renewed uptrend could plausibly unfold.”

Thielen also noted that several altcoins are already breaking out of their downtrend channels and trading at more “attractive levels.”

Bitcoin is currently trading at $85,720, up 2.1% over the last 24 hours, CoinGecko data shows.

Meanwhile, Ether (ETH), Tron (TRX), and Avalanche (AVAX) have rebounded 4.3%, 6.4% and 8.9% respectively over the last week. 

The crypto research analyst, however, expects to see “significant resistance” at the $90,000 mark for Bitcoin, should it reach that level.

Despite the more positive outlook, “no clear catalyst exists for an immediate parabolic rally” is in sight, Thielen said.

Related: Bitcoin ‘in position’ for first key RSI breakout in 6 months at $85K

He initially said Bitcoin wouldn’t drop below $73,000 — thereby avoiding a “deep bear market” — because the largest sum bracket of Bitcoin holders (wallets with 100-1000 Bitcoin) are likely family offices and wealth managers who are invested in Bitcoin for the long term.

He also noted that the US-based spot Bitcoin ETFs returned inflows for the first time last week since the last week of January. 

“We expect Bitcoin ETF selling from arbitrage-focused investors to wind down, as the arbitrage opportunities have primarily been closed for weeks,” Thielen added.

Magazine: SEC’s U-turn on crypto leaves key questions unanswered

Continue Reading

Trending